Live › vulnerability › CVE-2026-117913
Go to dashboardA use-after-free bug in the SVG rendering component of Firefox was fixed in Firefox 159 and Firefox ESR 153.6. Memory reuse after free can let a crafted page corrupt memory and potentially run code in the browser.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Anyone running a Firefox release or ESR build older than the fixed versions, since the bug is in the browser's own SVG handling. Managed fleets that pin Firefox ESR should confirm they have picked up 153.6. Systems that have already moved to the fixed releases are not affected.
No product ranges from the sources yet.
firefox --version159 for standard release or below 153.6 for ESR159 or later153.6 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-117913")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.